PluginStatsMergeWhy installs statistics
By MergeWhy · GitHub Marketplace
Tamper-proof audit evidence for every code change across 25 compliance frameworks
MergeWhy has 6 recorded installs on GitHub Marketplace.
It ranks #1116 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About MergeWhy
MergeWhy automatically captures tamper-proof evidence for every code change. Engineers merge normally. MergeWhy extracts evidence from PRs, reviews, tickets, CI/CD, and Slack, scores it (0-100), evaluates against 25 compliance frameworks, and seals it in a SHA-256 cryptographic vault.
Stop spending 400+ hours per audit cycle on manual evidence assembly.
How It Works
• Install MergeWhy on your repositories (30 seconds)
•
• Merge normally - engineers change nothing
•
• Evidence captured - every PR creates a Decision Evidence Record with reviews, approvals, tickets, CI/CD, and AI analysis
•
• Compliance evaluated - scored against your enabled frameworks
•
• Vault sealed - SHA-256 cryptographic seal at merge time
Key Features
• Evidence Score (0-100) - completeness across 6 dimensions
•
• 12 Frameworks - SOC 2, SOX ITGC, CMMC, FedRAMP, HIPAA, ISO 27001, PCI-DSS, DORA, NIST 800-53, GDPR
•
• 9 Gap Types - missing approval, no review, failed CI, missing security scan
•
• AI Analysis - documentation quality, intent alignment, audit readiness
•
• Cryptographic Vault - SHA-256 sealed, immutable after merge
•
• SOX Audit Sampling - PCAOB-compliant stratified random sampling
•
• Audit Bundles - ZIP with control matrices, evidence, summaries
•
• AuditBoard Export - 3-CSV format for direct Visual Import
•
• OSCAL Export - 1.1.2 JSON (SSP, Assessment, POA&M) for FedRAMP
•
• Auditor Portal - read-only tokenized links for external auditors
•
• CMMC SPRS Scoring - real-time NIST 800-171 tracking
•
• Cloud Security - AWS, GCP, Azure evidence collection
•
• GitLab Support - works with GitHub and GitLab
•
• Air-Gapped Collector - Docker agent for defense/government
•
• Self-Hosted - Docker or Kubernetes with OIDC auth
Who Is This For?
• SOC 2 startups - eliminate manual evidence assembly
•
• SOX companies - automate ITGC evidence (saves 400+ hrs/year)
•
• Defense (CMMC) - SPRS scoring, air-gapped deployment
•
• FedRAMP - OSCAL export for Sept 2026 mandate
Description from the GitHub Marketplace listing.
- Code quality
- Security
Where MergeWhy sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/mergewhy. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.